<html>
<head><meta charset="utf-8"><title>cargo-audit  #23 · wg-secure-code · Zulip Chat Archive</title></head>
<h2>Stream: <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/index.html">wg-secure-code</a></h2>
<h3>Topic: <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html">cargo-audit  #23</a></h3>

<hr>

<base href="https://rust-lang.zulipchat.com">

<head><link href="https://rust-lang.github.io/zulip_archive/style.css" rel="stylesheet"></head>

<a name="177270395"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177270395" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Hanif Ariffin <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177270395">(Oct 03 2019 at 18:05)</a>:</h4>
<p>Hi, I would like to work on this issue. However, I have 2 problems : I am not sure where to start. And I don't have any tests that I can work on. I tried looking up stuff in the "database" but all of them already yanked their vulnerable versions preventing me from getting them...</p>



<a name="177270491"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177270491" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Hanif Ariffin <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177270491">(Oct 03 2019 at 18:06)</a>:</h4>
<p>forgot the link for convenient to the issue =&gt; <a href="https://github.com/RustSec/cargo-audit/issues/23" target="_blank" title="https://github.com/RustSec/cargo-audit/issues/23">https://github.com/RustSec/cargo-audit/issues/23</a></p>



<a name="177273468"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177273468" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Shnatsel <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177273468">(Oct 03 2019 at 18:39)</a>:</h4>
<p><span class="user-mention" data-user-id="132721">@Tony Arcieri</span> any updates on that "test advisory"? Or is there an easy way to override the source of the database?</p>



<a name="177273503"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177273503" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Shnatsel <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177273503">(Oct 03 2019 at 18:40)</a>:</h4>
<p>In the meanwhile, I'm pretty sure <code>ncurses</code> crate is unsafe as all get out and there are open advisories for stuff depending on it as well</p>



<a name="177273572"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177273572" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Shnatsel <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177273572">(Oct 03 2019 at 18:40)</a>:</h4>
<p><a href="https://rustsec.org/advisories/RUSTSEC-2019-0005.html" target="_blank" title="https://rustsec.org/advisories/RUSTSEC-2019-0005.html">https://rustsec.org/advisories/RUSTSEC-2019-0005.html</a><br>
<a href="https://rustsec.org/advisories/RUSTSEC-2019-0006.html" target="_blank" title="https://rustsec.org/advisories/RUSTSEC-2019-0006.html">https://rustsec.org/advisories/RUSTSEC-2019-0006.html</a><br>
There two are still not fixed/yanked</p>



<a name="177273629"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177273629" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Shnatsel <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177273629">(Oct 03 2019 at 18:41)</a>:</h4>
<p><span class="user-mention" data-user-id="242691">@Hanif Ariffin</span> <span aria-label="point up" class="emoji emoji-1f446" role="img" title="point up">:point_up:</span> you can use these ones</p>



<a name="177273643"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177273643" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Hanif Ariffin <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177273643">(Oct 03 2019 at 18:41)</a>:</h4>
<p>thank you :)</p>



<a name="177275004"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177275004" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Shnatsel <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177275004">(Oct 03 2019 at 18:56)</a>:</h4>
<p>Oh wait, there are no fixed versions for these either</p>



<a name="177277985"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177277985" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Hanif Ariffin <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177277985">(Oct 03 2019 at 19:26)</a>:</h4>
<p>what is the format of the database's table?<br>
the suggestions by the cargo-audit defaults to the latest version, which is not secure....<br>
AFAIK, there must be a change in rustsec repo for this to be more robust i.e. says that there are no secure versions available!</p>



<a name="177278091"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177278091" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Hanif Ariffin <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177278091">(Oct 03 2019 at 19:27)</a>:</h4>
<p>TODO:</p>
<ol>
<li>Study the rustsec's report format</li>
<li>Read/Write Cargo.toml file</li>
</ol>



<a name="177280195"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177280195" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Shnatsel <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177280195">(Oct 03 2019 at 19:48)</a>:</h4>
<p>Advisories are in TOML files: <a href="https://github.com/RustSec/advisory-db" target="_blank" title="https://github.com/RustSec/advisory-db">https://github.com/RustSec/advisory-db</a><br>
The crate to parse that and match it against versions is here: <a href="https://github.com/RustSec/rustsec-crate" target="_blank" title="https://github.com/RustSec/rustsec-crate">https://github.com/RustSec/rustsec-crate</a></p>



<a name="177293616"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177293616" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Tony Arcieri <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177293616">(Oct 03 2019 at 22:12)</a>:</h4>
<p>I should create a test advisory, yeah...</p>



<a name="177293647"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177293647" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Tony Arcieri <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177293647">(Oct 03 2019 at 22:13)</a>:</h4>
<p><span class="user-mention" data-user-id="242691">@Hanif Ariffin</span> I can sketch out my idea of how to implement it in cargo-audit#23</p>



<a name="177293653"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177293653" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Tony Arcieri <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177293653">(Oct 03 2019 at 22:13)</a>:</h4>
<p>but yeah, parsing Cargo.toml files will be a part of that</p>



<a name="177293767"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177293767" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Tony Arcieri <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177293767">(Oct 03 2019 at 22:15)</a>:</h4>
<p>this crate already parses the <code>Cargo.lock</code> file and builds a dependency tree modeled with <code>petgraph</code> <a href="https://docs.rs/cargo-lock/3.0.0/cargo_lock/dependency/tree/struct.Tree.html" target="_blank" title="https://docs.rs/cargo-lock/3.0.0/cargo_lock/dependency/tree/struct.Tree.html">https://docs.rs/cargo-lock/3.0.0/cargo_lock/dependency/tree/struct.Tree.html</a></p>



<a name="177293879"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177293879" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Tony Arcieri <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177293879">(Oct 03 2019 at 22:16)</a>:</h4>
<p>so a <code>fix</code> command would need to walk that dependency graph from a vulnerable dependency to its edges, and then map the edges to crates in the local workspace, and then find the relevant dependency in the local crate's <code>[dependencies]</code> in Cargo.toml</p>



<a name="177293894"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177293894" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Tony Arcieri <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177293894">(Oct 03 2019 at 22:16)</a>:</h4>
<p>right now it doesn't parse <code>Cargo.toml</code> whatsoever</p>



<a name="177293925"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177293925" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Tony Arcieri <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177293925">(Oct 03 2019 at 22:17)</a>:</h4>
<p>I'd probably suggest only parsing <code>Cargo.toml</code> files for the <code>audit fix</code> command so we can continue to work on <code>Cargo.lock</code> files alone</p>



<a name="177485002"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177485002" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Hanif Ariffin <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177485002">(Oct 07 2019 at 01:41)</a>:</h4>
<p>This is strange :/ I can't keep the version low for me to test anything</p>



<a name="177485041"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177485041" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Hanif Ariffin <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177485041">(Oct 07 2019 at 01:42)</a>:</h4>
<p>it seems that all versions of ncurses have been yanked? and it goes immediately to the latest one</p>



<a name="177485094"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177485094" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Hanif Ariffin <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177485094">(Oct 07 2019 at 01:44)</a>:</h4>
<p>is it okay if i just make a dummy crate :&lt;</p>
<ol>
<li>put something in there, publish</li>
<li>remove the thing</li>
<li>should advice bumping up the dependency</li>
</ol>



<a name="177487264"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177487264" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Hanif Ariffin <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177487264">(Oct 07 2019 at 02:57)</a>:</h4>
<p>sorry I am a bit slow with these stuff :(<br>
In the meantime I have made a PR that improved error message</p>



<a name="177487822"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177487822" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Hanif Ariffin <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177487822">(Oct 07 2019 at 03:15)</a>:</h4>
<p>what does it mean for this to be this <code>if</code> to fail? that there is no advisories available? <a href="https://github.com/hbina/cargo-audit/blob/5ae1d70d9ed4ffcc6c5592796ca6ff0ca283a9f4/src/presenter.rs#L100" target="_blank" title="https://github.com/hbina/cargo-audit/blob/5ae1d70d9ed4ffcc6c5592796ca6ff0ca283a9f4/src/presenter.rs#L100">https://github.com/hbina/cargo-audit/blob/5ae1d70d9ed4ffcc6c5592796ca6ff0ca283a9f4/src/presenter.rs#L100</a></p>



<a name="177547233"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177547233" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Shnatsel <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177547233">(Oct 07 2019 at 18:38)</a>:</h4>
<p><span class="user-mention" data-user-id="132721">@Tony Arcieri</span> <span aria-label="point up" class="emoji emoji-1f446" role="img" title="point up">:point_up:</span> any ideas about that <code>if</code>?</p>



<a name="177547313"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177547313" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Tony Arcieri <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177547313">(Oct 07 2019 at 18:39)</a>:</h4>
<p>those are for informational advisories that show warnings</p>



<a name="177547325"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177547325" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Tony Arcieri <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177547325">(Oct 07 2019 at 18:39)</a>:</h4>
<p><span class="user-mention" data-user-id="242691">@Hanif Ariffin</span> let me go ahead and create a test crate and test advisory...</p>



<a name="177674469"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177674469" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Tony Arcieri <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177674469">(Oct 09 2019 at 01:27)</a>:</h4>
<p>There is now a test advisory: RUSTSEC-2019-0024: <a href="https://github.com/RustSec/advisory-db/pull/187" target="_blank" title="https://github.com/RustSec/advisory-db/pull/187">https://github.com/RustSec/advisory-db/pull/187</a></p>



<a name="177767356"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177767356" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Hanif Ariffin <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177767356">(Oct 10 2019 at 00:02)</a>:</h4>
<p>I am thinking that the fix should find a non API breaking versions to be considered first, yes?</p>



<a name="177767391"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177767391" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Hanif Ariffin <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177767391">(Oct 10 2019 at 00:03)</a>:</h4>
<p>btw, the way i set it up is you run it like this <code>cargo-audit audit --fix</code>, since I am going to need <code>audit</code> to be performed before i can perform any fix...</p>



<a name="177767486"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177767486" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Tony Arcieri <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177767486">(Oct 10 2019 at 00:04)</a>:</h4>
<p><span class="user-mention" data-user-id="242691">@Hanif Ariffin</span> my suggestion for the heuristics would be starting with the latest version and working backwards until it finds the newest version that satisfies the given requirements</p>



<a name="177767500"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177767500" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Tony Arcieri <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177767500">(Oct 10 2019 at 00:04)</a>:</h4>
<p>sure that sounds fine</p>



<a name="177821474"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-audit%20%20%2323/near/177821474" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Tony Arcieri <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-audit.20.20.2323.html#177821474">(Oct 10 2019 at 15:29)</a>:</h4>
<p>nice @ <a href="https://github.com/RustSec/cargo-audit/pull/151" target="_blank" title="https://github.com/RustSec/cargo-audit/pull/151">https://github.com/RustSec/cargo-audit/pull/151</a></p>



<hr><p>Last updated: Aug 07 2021 at 22:04 UTC</p>
</html>